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FOREWORD 


The Software Engineering Laboratory (SEL) is an organization 
sponsored by the National Aeronautics and Space Administration 
Goddard Space Flight Center (NASA/GSFC) and created for the 
purpose of investigating the effectiveness of software 
engineering technologies when applied to the development of 
applications software. The SEL was created in 1977 and has three 
primary organizational members: 

NASA/GSFC (Systems Development Branch) 

The University of Maryland (Computer Sciences Department) 

The Computer Sciences Corporation (Flight Systems Operation) 

The goals of the SEL are (1) to understand the software 
development process in the GSFC environment; (2) to measure the 
effect of various methodologies, tools, and models in the 
process; and (3) to identify and then to apply successful 
development practices. The activities, findings, and 
recommendations of the SEL are recorded in the Software 
Engineering Laboratory Series, a continuing series of reports 
that includes this document. 

Single copies of this document can be obtained from: 

NASA/Goddard Space Flight Center 
Systems Development Branch 
Code 552 

Greenbelt, Maryland 20771 
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INTRODUCTION 


The Add programming language was created as the common language for the Department of Defense (DOD). 
However, there are a growing number of organizations outside the DOD. both government and commercial, 
who are choosing to use Ada tor their large system development efforts. NASA is one such organization. 
Mandated lor the space station. Ada has also been adopted or considered for use by several other large NASA 
programs. 

Ada has the potential to be a part of the most significant change in software engineering technology within 
NASA in the last twenty years. Thus, it is particularly important that all NASA centers be aware of Ada ex- 
perience and plans at other centers. To promote such an awareness, the First NASA Ada Users' Symposium 
provided a lorum tor the exchange of ideas, experiences and plans on the use of Ada within NASA. 


The symposium attracted a diverse, enthusiastic audience. The program covered Ada activity across NASA, 
with presenters representing five of the nine major NASA centers and the Space Station Freedom Program 
Office. Projects discussed included: 

Space Station Freedom Program Office: the implications of Ada on training, reuse, management and 
the software support environments 

• Johnson Space Center (JSC ): early experience with the use of Ada, software engineering and Ada 

training and the evaluation of Ada compilers; 

• Marshall Space Might Center (MSFC): university research with Ada and the application of Ada to 

Space Station Freedom, the Orbital Maneuvering Vehicle, the Aero-Assist Flight Fxperiment and the 
Secure Shuttle Data System; 

• Lewis Research Center (LcRC): the evolution of Ada software to support the Space Station Power 
Management and Distribution System; 

• Jet Propulsion Laboratory (JPL): the creation ot a centralized Ada development laboratory and cur- 
rent applications ot Ada including the Real-time Weather Processor for the FAA; — - 

• Cioddard Space Flight Center (GSFC): experiences with Ada in the I light Dynamics Division and the 
Lxtremc Ultraviolet Fxplorer (I.UVI ) project and the implications ol CiSFC experience for Ada use in 
NASA. 


Despite the diversity of the presentations, several common themes emerged from the program: 

• Methodology; NASA experience in general indicates that the effective use of Ada requires modern 

software engineering methodologies: There is a growing trend towards the acceptance of object- 

oriented approaches as the basis tor the most appropriate methodologies for Ada development. 

• Lrainingi Mt is the soltware engineering principles and methods that surround Ada, rather than Ada 
itself, which requires the major training effort. This is evident in experience at LeRC, JPL and GSFC 
and is reinforced by the research of the University of Houston for JSC. Further, both GSFC and the 
University of Houston stress that this training must be focused to the needs of each organization and 
must include immediate hands-on involvement in real development efforts. 

• Reuse: Due to training and transition costs, the use of Ada may initially actually decrease produc- 

tivity. as was clearly found at GSFC However, at GSFC as well as in work done for JSC. there is a 
clear indication that the use ot Ada and associated methodologies can result in an immediate signifi- 
cant increase in the reusability ot software. Ol course, over time this will result in a major increase in 
elective productivity, reliability and maintainability, since less and less new code will need to be cre- 
ated for each project. 






• Real-time:- Work. at LcRC, ILL and ( » S I C shows that it is possible to use Ada for real-time applica- 
tions. However, the LcRC experience especially shows how careful one must be in choosing a com- 
piler. At C.SI C . the I L \ I project found it necessary to modify the vendor-supplied run-time system 
to handle a specific embedded hardware configuration. 

Overall, the symposium reflected a high level of enthusiasm for the use of Ada in NASA. Ada is being effec- 
tively applied to (Tight and ground-support tasks, both inside and outside the space station project. However, 
there are also some cautionary notes: the transition to Ada may take longer and be more difficult than origi- 
nally anticipated: NASA needs to focus more clearly , effectively and intensely on software engineering training 
efforts: and NASA must press compiler vendors to provide more high-quality Ada compilers with the features 
needed for real-time, embedded applications. 

By providing a forum for discussing Ada benefits, lessons-lcarned and problems, the First NASA Ada Users' 
Symposium was highly successful in its aim of fostering communication between the NASA community of 
Ada users. This community is still young and growing, but it is clear that Ada is “here to stay" in NASA. 
Right now wc are at the knee of the growth curve in the use of Ada. As we proceed upward on that curve it 
will be increasingly important to maintain and strengthen the sharing of experience. This symposium will have 
been truly successful if it is only a beginning to such a process. 

In conclusion. 1 would like to greatly thank Lisa Kelly, Frank McCiarry and the Software Fngineering Labora- 
tory staff. Without their help it would have been totally impossible to organize this symposium in the short 
time we did. I would also like to thank all the presenters who, on quite short notice, put together an excellent 
overview' of Ada activities in NASA. 


I d Seidcwit/ 

Head, (ioddard Ada Users' ( iron p 
(loddard Space Might Center 





Session 1: EXPERIENCES 


1 . Ed Seidewitz, NASA/GSFC 

2. William Howie, NASA/MSFC 

3. Robert Loesh and Pat Molko, JPL 
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TOPICS 



AUBURN UNIVERSITY 
DEPARTMENT OF COMPUTER SCIENCE AND 

ENGINEERING 


NASA PROJECTS 


QUEST 

- Query Utility Environment for Software Testing 
Dr. David B. Brown, Principal Investigator 


GRASP 

- Graphical Representation of Algorithms, Structures 
and Processes 

Dr. James C. Cross, Principal Investigator 



Query 

Utility 

Environment for GENERAL GOAL: 

Software 

Testing 


To provide an environment in which more tests and 
more effective tests can be performed in order to increase 
the reliability of Ada code. 


Query 

Utility 

Environment for OBJECTIVES: 

Software 

Testing 

1. Intelligent Automatic Test Case Generation 

2. Controlled Test Case Execution 

3. Coverage Analysis 

- to measure module reliability 


QUEST/ADA PROJECT SCOPE 


REQUIREMENTS 

ANALYSIS 















GRA SP/A da 


System Dictionary 











GRASP OVERVIEW 
GENERAL GOAL: 

To increase designer and programmer productivity 
through the use of graphics-based tools. 

OBJECTIVES: • 

To produce immediate graphical aids for development 
and maintenance. 

. CSD - Control Structure Diagram 5 - 

. Structure Chart 
. Data Flow Diagram 


To understand the process of graphical representation 
generation. ^ 

To reverse the process to generate code from the 
graphical representation. 




end CONTROLLER; 





Justification 


• Provides an understanding of automatic code gen- 
eration 


• Ada is well-defined - a good base from which to 
work upwards 

• Many designers will work in an Ada PDL 

• GR's can be provided at little cost 

• Reviews of requirements and design specifications 
are potentially better facilitated by use of GR's 

• 90 % of maintenance effort is attempting to 
understand existing code (Standish) 

• Generation of standardized GR's of Ada software 
will promote reuseability - an original objective for 
the adoption of Ada 



Software safety can be ensured to a large extent 
by software verification 


"A Comparison of Software Verification 
Technique" (NASA Goddard SE Lab series, 
April 1985) 


• Empirical study of code-reading, functional 
testing, and structural testing 


Found code-reading provided greatest error 
detection capability at lowest cost 






Ada and the OMV Project 
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The TLD Ada Compiler 
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Ada Features Undesirable in OMV Real-Time Applications 




Tasking Inefficiencies 








Future of Ada and the 




AERO-ASSIST FLIGHT EXPERIMENT (AFE) 
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SECURE SHUTTLE DATA SYSTEM (SSDS) 



■ m 

s 

< 

cc 

o 

o 

£E 

Q. 






CO i I 

■o 

< 


OCO 
LU O 
0. -J 
CO 

<o 
z ° 

oS 

▼— 

O — 
ZQC 
Z LU 


CCS 

3 ° 

p 

OCO) 

oc 

Sh 

<2 

LU O 
20 




SECURE SHUTTLE DATA SYSTEM (SSDS) 



I 



SECURE SHUTTLE DATA SYSTEM (SSDS) 







”2 

G£ 


a: 

a 


s-* 

ft- 

o 



* X 


1— 

U </) 

_ o 

<✓> 

< 

_Q LU 

s o 

— oo 

LU 

_J 

LU 

o 

* 

O 



o 

LU 

LU 

„ Q£L 

1— l 

< 

r> 

Q£ 

M I- 


LU 

U O' 

C£ 

CL 

M IU 

_ LU 

X 

a gq 


LU 

H O 

|— 


<QC 

< 

< 


__ LU 

o 


3 

< 




J 

II 

1 


1 December 1988 





^0- 









X r i 









t J> *-• 

< CL 



o 




r-> 



-1 

z 







< 

H 




• ^ 




z 

a 




cn 

s , , 



o 

o 




LU 



3 

w 

o 




Hi 



H 

</) 

Q 



h* 



Lx. 

< 

LU 

LU 



HI 

s™* 




tt 

u 



U 






Hi 



HI 



z 

Li. 

Li. 

< 



U 



o 

O 

O •• 

1— 



< 

I • 


w 


h 

LU 


CO 

Lx. 



H 

H 

h U 

Q 


H 


' — • 


< 

CL 

J LU 



CM 

U 



cl 

< 

x n 

Q 


1 

o 



H 

a. 

co o 

LU 


Q 

a 


C^« 

</> 


LU O' 

h 



h- 



M 

> 

ao_ 

Qi 


OO 



LU 

z 

-j 


< 


l 

o 


f— 

M 

_j 


h- 


o 

o 

— 

00 


< 

Cl 

LO 


o 


1— 

>- 

5 

X 

LOS 



o 

< 


00 

< 

1- 

<<-> 

O 



LU 




Z 

w 

< 


a 

CL 


Q. 

z 

LU 

I"n 

X 


LU 

< 


IS 

o 

> 

00 CL 






Q£ 

w 

LU 

cr> o 

o 


o 

CO 



H 

LU 

rH (/) 

z 

a. 

_J 

CM 


UJ 

< 

• - a 

<o 

M 

g 

Hi 


■ — 

zc 

M 

H < 

O' LU 

a 

< 

Ll 



> 

z a 

LU O 

o 


h- 

O 



<£ 

LU o 

CO o 

o 

U. 




oo 


z a. 

O CL 

<0 

O 

a 

tH 1 

— 

i-H 

-J 

tL ^ 

1-0- 

LU 


z 

CM 



< 

o 

(J 

oc 

LU 

< 



H- 

a 

u Z 

O CC 


N 


h- 


<c 

LU 

LU LU 

LU 

Lx. 

H 

LU 

< 

— 


a 

> H 

O x 

O 

(0 

O 




LU 

LU (/> 

LU |- 



< 




Ll. 

Q > 

H < 

LU 

<0 

X 

□ 




OO 

< LU 

z z 

LU 

o 

h 

— 



LU 

HS 

HI CJ 

z 

z 

</> 



• • 
cl 

a lu 

>- o 

h 

M J 

H w 
(0 

H 

H 

.5 

> 

</> 



o 

h- < 

Z ^ 

1- LU 





</> 

O CL 

m Cl 

^ Q 

ro 

o 

a. 



z 

o 

H <0 

o a 

1- 

O- z 




1 



CL 

M 

S LU 







00 

a.< 

So 

1 

i 

1 

H 


o o o o 



J 

o. 


EXTERNAL INTERFACES 



. q l 

} 2> * u 

< rr m 


o 

o 


c- 


00 

tn 


oo 


I- o 


< H 


Id 



03 

O Z 
1- O 


O 

3 M 


1- 

< H 

(/) 

z 

Id Z 

h 

Ld 

Q 2 

(/) 

H 

w O 

M 

CO 

> L. 

O 

> 

o z 

O 

00 

O' M 

J 


a 

o 

• •> 

O' 

a 

Id 

a id 

o 

CO 

Z X 

Id 

< 

< \- 

1- 

X 

< 

Id 

a 

< Ld 

K 3 

z 

zo 

< 

a 

oo* 

a i- 

z 

HO* 

z 

< 

OrH 

U Id 


Id 

Id Z 

(/> 

D 1- 


i h a 
H I- Ld 
< CL -I 
Id Hi -J 

3 ao 

Id U. H- 
> O Z 
H O 
Id Z <J 
U O 
Id M O 
h H 

< u. 

— I Z Ll 
-I H < 

M 2 a 
3ldh 

</> , 
o_ o c* 

3 H H 

oe: a < 


to 

a s 


u. 

_i 

id 

X 

</> 

I 

id 

X 

H 

I 

U. 

Li. 


Id 

H 

M 


O 

M 

H 


O 

M 

Li. 


< 

a 


o 

o 

oo 


CM 

r-^ 


Id O 
J 3 

o 

o 

>■ 

H< 


3 

CO 

< 


- s s St 



=c 

</> 

o 

Ld 

DLl. 

• *» 

os 

Q. 


Ld 

Id 

O 

Z O 

> 

i- 

-J 

H I- 

H 

3 

Id 


</> 

CL 

> 

> 3 

z 

s 

Id 

-J Id 

Ld 

o 

Q 

H- OS 

H 

u 


Z Id 

Z 



Id > 

a. h 

H 

H 

1 

os -j 

3 



3 Id 

N 



o a 

00 

o 



u 

'w' 

o 

o 

00 


CO 

CO 


V) 


o 

o 

00 


un 

CM 


J 

a 

H 



Ada, DOD-STD-2167 , revision A: Tailored 


p 


GL 


— 

' ct 


o 

a 












u 












w 




in 








Z 




a 


o 



5 — 







id 


1- 


K- 




H 




0. 




id 








o 

id 

z 


in 





in 



_J 

a 

Id 


-j 

— 



in 

z 



Id 

> 

h 


o 





Id 



> 

h- 

in 


o 




o 

H 



Id 

O 



(— 




VO 

<n 



a 

H 

oo 



' — *• 

o 


CO 

> 




O 



z 


V 



in 



3 

O' 

ct 


o 




1 




\ 

Q_ 

o 


Q 




0 



in 


K- 


a 


O 



z 




lx 

< 


X 


CJ 



H 



O' 

O 

a 


o 


'w' 

Id 

o 

H 



o 


id in 





tt 

a 

< 



lx 

Id 

Z Id 



— 


X 

o 

tt 




0 

Id O 




O- 

H 

M 

Id 



in 


CD < 


l-H 



O 

z 

Q. (/) 



z 

2 

lx 


HH 


Ixl 

Id 


O -I 


in 

o 

l-H 

< £2 


l-H 


H 

H 

CO 

O 



M 


1- Id 




oo 

M 


00 O 



H 


< h 


Lxl 


>— 

X 


z: o 


\ 

< 

o 

O Z 

h 

OO 


oo 

O 

</> 

> h* 

1- 

o 

H 

O' 

M 

Id 

< 



O' 

HH 

^ O 

Z 

o. 

tn 

O' 

h 

in 

00 



< 

l-H 

|g 

id 



IH 

<n -i 


a 


~tg 



Z 


* 


Id < 

_i 



oe: 


| 


z 

GO 

O' 


1 — z 

o 

a. 

— 


\ 


o 

HH 

Q 


O' 

o 

f— 


1x1 

3Z 


000 

O' 


* 

z 

O Id 

H 






ZH 

H 

a 


id 

Id h- 




H- 

a 

oo 

< 

> 

z 

i 

h 

o. x 

< 


— 


Id 

ao 


z 

< 

in 

o Id 

a 

O 


uo 

H 

O CM 

Z I— 

Id 



> 

_J 

<c 

< 


l-H 

X 

MCO 

— ILxl 




00 

Id Id 





CD 

z 

LdZ 


o 

o 


> H 

| 

■> 


1— 

M 


><o 

<51x1 

z 

VO 

O' 

h 

ld < 

Z 


< 

a 

Id 

00 

o 

Id 

a □ 


Id 

- ■ 


h 

r-H >■ 

>•0 



M 

0 

X 


O 


^2 

if) 



q! 

| 


O' 

— J z 

o 

< 

— — 


M 



o 


< 

a. m 

1x1 

O 



a 

o 

O 

-1 


CM 


*-d m 

o 

<c 






Id 












> 







- — " 





Id 









O 



a 

o 

O 

o 

o 

o 

o 


J 

a 

n 



REASONS FOR CHOOSING ADA AND ITS IMPACT 


SO 

I 




bJ G 
CL LU 
H U 


S < 


> 


G 


••C 


G 

1- G 

< 

Os 

G 

3S 

< 

ou. 

z 

a 

Q_ CL 

M 

O 

G 

3 u - 

LI 

Gj 

h 

z < 

(0 

o 

LU 

QIC 

tt 

O 

LU 

U. G 

1- 

bJ 1 

Z 

< G 
G Z 

M 

< ill 

H 

Z 

u. 2 

LJ 

oSz 

2 

O Ui 

LU 

HI LU 1- 

O 

G CL G 

< 

=> > 

Z 



g r"*» 

HI 00 Z 

o 

Q. 

o<d- h 

O 

1- 

< £ 

I- 

u- > 2 

G 

G o 

s 

S H jj 


Q. 

Ll-OOC 



o o 


g 



2 

o 


□ 

z 


1 - 

M 


G 

G 


> 


a 

00 


z 


z 

H 

LU 

H 

O' 

J 


LU 

G 

G 

LU 

< 

LU 

z 

G 

H 

M 

_J 

G 

o 

LU 

LU 

z 

W 

Q! 

LU 

Ll_ 

LU 



H 


O 

2 

X 

1 - 

H 

OO 

LU 

Lx. 

o 

a 

Li. 

z 

> 

< 

3 

f- 

h^s 

o 

o 

oo z 

00 

H 

o 


O 

G M 

LU 

CL 

Z 1 - 

H 

Q„ 

< O 

O 


< 

2 

Q. 

I- iu 

O 

2 ; 

Z O' 

CL 

go 

LU 



2 G 


Li. 

LU LU 

G 

O 

O X 

LU 


< H 

CL 

> 

Z 2 

3 

r 

M 

1 LU 

1 - 

< 

-J G 


LU 

H LU 

h S 

Ll. 

G O 

O G 


< Z 

Us/ 

G 

H < 

n ^ 

s 

CL X 

o < 

< 

o z 

cl a 

G 

Ql LU 


Ci 

o 

o 

o 


RACTICES 


REASONS FOR CHOOSING ADA AND ITS IMPACT (CONT'D) RWP 



pmm-7 













f ±' 


Q 





UJ 


o 



2 


o 



o 


-j 



X 


oo 



(/) 


o 

o 

o 


o 

LU 

o 

o 


o 

o 

CVJ 

CJ 


z 


N-*> 

Q 

< 


OS z 

w 

</> o 


z 

UJ 

H- 

. 


* a 


(/) 

LU 


o: < 
< z 


>- 

</> 

OO 

OO 

LU 

OO 

CO 

<c 


X LJ 


UJ 


O O 


N 


z z 

Ul < 

CQ Z 
< O 


M 

</> 

1 

z 

X 


t/> 

Q U. 

</) 

M 



<C 0! 


a 

• • 
OO 

o 

M 

LU 

a. a 

</> 

w 

LJ 

z 

CO 

OC 

S uj 

G£ 

< 

M 

LJ 

h 

UJ 


Ui 

U 

U. < 

N 

(/) 

< 

Z 

° a 

W 

00 

M 

Q 

< 

| 

H UJ 

lj a 

Z 

a. 


o 

oo < 

UJ 


L_ 


1- 



cl 


</> 



Ul 


> 



a. 

o 

00 

o 


J 

a 


z 

CL 

UJ 

U 



</) 

CL 

< -J 
LJ < 

> u 

M 

z 


\ 

in z 

o 


-JOO 

H X 

u 


-1 

U 

< 


< CL 

o 

U. UJ 
OH- 

H- 


CL U. 

o 

UJ < 

o 


U. CL 

O O 

z 


o 

<<£ 

> 


a x 

O CO 

a 

UJ o 

o 


Ml* 

> UJ 

< 


a oc 

< a 



UJ Q 

z 

§ 


o- 3 

Z UJ 

LJ 

O 


o >■ 

< H- 
H- 

< 


Z Q 

</) < 

CL 

(/) 

M X 
Z 1- 

< </> 
X • « tt 

UJ 


M (/) 

UJ < 

-1 


< 

u. o z 

H 

M 

a uj 

U. Z M 

a 

OL 

H- </> 

< LJ Z 

z 


< Lu 

H- M u3 

o 

1- 

h O L 

</) aco 

CJ 

z 

Z < 

UJ 


UJ 

O </> H- 

nan 

o 

z 

CL X00 

Z X z 

to 

UJ 

Li. -1 

UJ UJ Ul 

o 

Q. H- 

z z 


< 

a. z 

UJ 1- UJ 

Q 

z 

X -1 LJ 

o z o 

UJ 


UJ z 

< UJ < 

a 

x z K 

z z z 

o 

\ 

1- z o 

< Id < 

z OS 

-j 

_! 

Z O -j 

UJ 

UJ 

O O UJ 


> 

z 

Z CL > 

Q- Z O 

UJ 

z 

1 UJ UJ 


o 

o 

CO 0.0 


</> 

Q£ 

UJ 

CL 

o 

o 


o 




ADA RISKS: ASSESSMENT AND CONTROL (CONT'D) 


I- Id 

< a 

O X 
M H 


-J 

< 



a 

UJ 

Z 

i- 

> 

< 

ld 

Id 

a o 

l/> 

</> 

M < 

H 


au. 

X 

§ 

<2 - 

o 

a 

J- 

1- 

Li. 

z 

< 


.. UJ 


id 

-J z 

>■ 

O 

o a 

r 

z 

a o 

M 

Id 

i- -J 

— J 

H 

Z Id 

M 

£ 

o > 

to 

id 

o id 

w 

a 

_ Q 

X 

X 


id 

Id 

01 -1 

-J 


M < 

Li- 

< 



CO 

_ Z O 

1- 

§ 

a id o 
O Z -J 

Z 

id 


Li. Id O 

Z 

o 

a o 

Id 

z 

ZOO 

O 

< 

u z X 

< 


<HH 

Z 

>■ 

a (/) 

O Id 

a - z 


H H- 

a a 


</> O 

a z z 

3 

3 Id 

< M o 


O. M 


o o 


Z - 

z 

Z O 

-J > 1- 


o ^ 

< 

M CC 

-1 H O 

z 

(J UJ 


a 

< O Id 

M 


Id 

X 

a i- a 

< 

-JO 

-J 

Id < 

LU O 01 

1- 

-J LU 

X 

LO Q 

> a z 

QQ 

<o 

Q 

Id 

O 

=>< 

o a w 

O 

o 

00 

O 

o 

o 


J 

a 



NO SIGNIFICANT ADA EXPERIENCE 



H 

40 

H 

CO 

40 

< 

o 

H 

Q 

UJ 

w 

X 

cn 

& 

UJ 

o. 

x 

UJ 

< 

a 


§ 


H 

UJ 

CL 

Z 

< 

UJ 

2 

1 

r“ 

bu 

o 

O 

-j 

40 

UJ 

> 

O 

UJ 

z 

o 

< 

40 

40 

UJ 

a! 

CL 

UJ 

X 

Q. 

Q 

O 

UJ 

-1 

U 

UJ 

O 

> 

CL 

UJ 

a 

a u. 

o 

u. 
3 < 

z 

\ l- 

< 

4/) 40 


40 

UJ 

H 

O 

o 

-I 

o 

Q 


o 

w 

(0 

4/) 

UJ 

4/) 

O 


UJ 

•• o 

40 
fc 




< 

Q. 40 
W 4/) 
O < 


o 

X 

H 

H 

> 

2 

|- 

z 

h h 

40 

H 

UJ 

H 

U 

z 

H 

Z 


2S 

s 

g 



Lf) 2 

a 


4/> 

H 

s 

H 

csj a 

fO 

1 

1 

Ll_ 

i 

1 


J 

a 


-j 



i i 


3 WEEKS FORMAL ADA TRAINING 

2 DAYS OF OBJECT ORIENTED DESIGN (00D) 
TRAINING PLUS GSFC BRIEFING ON GENERAL 
METHODOLOGY (GOOD) 


ADA TRAINING APPROACH 



o 


Q_ 





z 

> 



z 



M 

Q 

OL 


UJ 



2 

3 

V 


H 



H 

H 



</) 



<r 

</> 



>■ h 



2 

a: 


(/> O 



I- 

UI 

Q 


UJ 




</) 



•- n 
u. o 



_j 

< 

u 

>- 


Ll O' U. 




a 


< 0 . u. 



§ 

o 

13 


1- < 



o 

z 

h 


</> - h- 



u. 

M 

</) 


_ </> 




z 

UJ 


S O h 

z 

o 


z 

o 

H 

< 

(/) 


Ll. ih q£ 

M 

o 

M 

2 

< 


1 - o 

h- 

z 

(/) 

H- 

U 


O < Q. 

< 

M 

UJ 


O 


z a a 

1- 

z 

g 

< 


HUD 

z 

M 


G 

z 


o a </> 

UJ 

< 

G 

< 

H 


3 o 

H 

a 

UJ^s 


z 


-J cl 

CL 

1- 

h — J 

z 

M 

z 

Oo3 uj 

o 


ZQ- 

M 

< 

o 

z z 


< 

UJ«"0 


a 

M 

H(-h 

oo 

Q 

H 

a 

I- 

(/) 

</> o 


< 

a u. 

z 


</> 

CO UJ 


o o 

M 

< 

UJ 

I- I- a 


-J 

|- 

Q/^ 
C (0 

00 

z z 
< -< 

1 

| 

l-CSJ 

< 

a 

z 

o 

0. o 


2 

UJt-f 

H 

U- O 

z 

H Z h 


o 

n 

(J 

O w 

M 

UHZ 

> 

Ll 

CQ 

H 

h 

z 

H a UJ 

< 



H >■ 

(/) < 

w 

1- UJ 2 

Q 

(/) 

a h 

* U 

< 

a uj uj 


* 


< M 

UJ IH 

a 

< z o 

CM 

UJ 

> 

a > 

UJ -J 

[— 

Q. M < 

N 

UJ 

< 1- 

M 

3 2- 


o z 

H 

2 

O O 

H 1- 

a 

a 

CSJ Z < 

1 


z 

O O 

< 

z 

o 

csj ui 2 

CSJ 

CSJ 

CSJ^ 

z < 


u 

U 







UJ 






i 

00 

1 

1 

1 

1 

1 


J 

a 


o 



DEVELOPMENT APPROACH 



DEVELOPMENT APPROACH 


•V 

\ ;> 

v 

f ± 


a 




o 


3 

a 


on 




o 


> 

Q 


CQ 

on 



V 


O 



< 

M 


Ui 

H 


-1 

Z 



a 



Z 


>• 

X 


o 

o 


o 

o 


_J 

o 


o 



a 

z 


o 

o 


z 

M 


h 

(/> 

ad 

LU 

a 

Q 

z a 

o 

<-> 

a 



z < 

a 

H 

O 1- 

a 

< 

M </) 

< 


h 

2 

LU 

o a 

P 

Q 

a u 

a 

O 

a z 

o 

O 

</> < 

on 


z a 


a 

H X 

a < 

o 

(/) 

o o 


Z </) 


o\° 

<< 

o 

lo 

o 

Z X 

»— i 

< H 

M H 


Lx. U 

a m 


3 

o 3 


a a 

-i 


a o 

w a 


</> a 

< </) 

O 

= Q- 

1— D 


o 

O 


J 

a 


CO 


I 

a 



LESSONS LEARNED/RECOMMENDATIONS \RWP 



Id 

<J 

3 

CL 


an 

z 


o 

w 


</) 



z 

> 


o 

o 


a. 

o 


</) 

J 



o 

-1 

id 

Q 

mJ 

01 

o 

id 

3 

X 

3 

(/) 

h 



Id 

a 

Id 

Z 

Id 

X 


X 

rf 

a 

01 


z 

o 


< 

3 

CL 

o 

X 

z 

z 

u 

01 

w 

< 


2 

Q 

a. 

M O 

01 

= z 

< z 

a. 

□ 

tt M 

a. 

(/) z 

H- H 

< 

* »- 

01 


</> 

Id < 

o 

H </) 

> H- 

z 

Q 

< < A 

H 

z 

I 

z 

h* < 

O 

H 

Z H 

O H 

< 

Id (/) 

1 - _ 

a 

Z 01 

01 

I- 

3 Id 

H O 


o a 

</> H 


O Z 

Id t* 


O 3 

oo a 

o 

o 

o 


Id 



CO 


1 - 


Id 


< 

o 

H 

u. 

H 

z 

O 

u. 

a </> 

M 

X 

< 

Id <A 

z 

1 - 

H 

Z Id 

M 

(0 

iA 

3 oi 

< 


Id O 


Id 

1 - 

1 - o 

1 - 

CO 

(/> 

Z 01 


< 

w 

M CL 

o 

o 

in 


z 


(/> 

mj an 

M 

u 

< 

-J o 

01 

H 


< H 

X 

Ll 

o 

Z M 

o 

M 

i- 

iA Z 


u 


o 

> 

Id 

co 

o z 

o 

Q. 

H 

z 

o 

(A 

01 

H > 

-1 

1 

Id 

H J 

o 

h 

0 L 

1 - Id 

O 

U 

X 

Id </) 

o 

Id 

Id 

<A O 

X 

n 


J 

H 

o 

< 

>■ <J 

Id 

01 

a 

CO 

z 

Q. 

< 

a 




<A Z 

o 

a 

a 

X < 

Id 

id 

Id 

<A 

M 

O 

o 

M </) 

U. 

H 

w 

01 Id 

M 

> 

> 

Z 

01 

o 

O 

-J o 

Id 

01 

01 

O H 

> 

Q. 

0 . 

01 (/) 




H Id 




Z -i 




O H 

O 

o 

o 

o z 


O 


o 


J 

a 

n 


May need to increase preliminary design phase by 
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ISSUE 2 


COMPILER EFFICIENCY 


SOFTWARE 


MODULE 

1750 

MEMORY WORDS 


RUN 

ON 

TIME CHECKS 

OFF 

Ada Run Time 
Executive 
(rel . 3.1) 

6385 

(3810,239,2336) 


COP Flight 
Executive 

17585 

(12303,399,4883) 


Instruction 

Test 

1011 

(816,6,189) 


Unused 
Memory Test 

859 

(849,10,0) 


Exclusive-OR 

Test 

615 

(601,14,0) 


Memory 

Monitor 

173 

(167,6,0) 


COP OK 

141 

(131,10,0) 


SUBTOTAL 

26769 

22580 

APPLICATIONS 

PROCESSORS 


Update Filter 

17946 

(16371,144,1541) 

6180 

(4695,54,1431) 

Math Library 

3765 

(3455,229,81) 

3018 

(2780,157,81) 

Statistics 

Monitor 

8489 

(6082,202,2205) 

6969 

(4562,202,2205) 

TOTAL 

56969 

38747 

DATA AREAS 



System Heap/ 
Stack 

12288 

(0,0,12288) 

12288 

(0,0,12288) 

Star Catalog 

2100 

(0,0,2100) 

2100 

(0,0,2100) 


32% 

SAVINGS 


UPDATE FILTER CONTROL PROCESSOR 


SOFTWARE 

MODULE 

ADA 

LOC 

1750A MEMORY 

WORDS 

RATIO 

PER 

WORDS 

LOC 



RUN TIME 

CHECKS 

RUN TIME 

CHECKS 



ON 

OFF 

ON 

OFF 

UF DATA DEF 

52 

1437 

1434 

27.6:1 

27.6:1 

(spec) 


(32, 2, 1403) 

(29, 2, 1403) 



UF DATA TYPES 

16 

30 

27 

1.9:1 

1.7:1 

(spec) 


(28, 2, 0) 

(25, 2, 0) 



UF ONE (spec) 

6 

36 

33 

6.0:1 

5.5:1 



(32, 2, 2) 

(29, 2, 2) 



UF ONE (body) 

27 

460 

178 

17 : 1 

6.6:1 



(454, 6, 0) 

(176, 2, 0) 



UFTWO (spec) 

25 

57 

54 

2.3:1 

2.2:1 



(46, 2, 9) 

(43, 2, 9) 



UFTWO (body) 

223 

4877 

2050 

22 : 1 

9.2:1 



(4827, 50, 0) 

(2036, 14, 0) 



UFTHREE (spec) 

12 

48 

45 

4.0:1 

3.7:1 



(40, 2, 6) 

(37, 2, 6) 



UFTHREE (body) 

109 

4519 

879 

41 : 1 

8.1:1 



(4491, 28, 0) 

(865, 14, 0) 



UFFOUR (spec) 

9 

42 

39 

4.7:1 

4.3:1 



(36, 2, 4) 

(33, 2, 4) 



UFFOUR (body) 

96 

4958 

910 

52 : 1 

9.5:1 



(4930, 28, 0) 

(904, 6, 0) 



UFTASK (body) 

18 

78 

51 

4.3:1 

2.8:1 



(78, 0, 0) 

(51, 0, 0) 



FLOATUTILITY 

19 

51 

48 

2.7:1 

2.5:1 

(spec) 


(42, 2, 7) 

(39, 2, 7) 



FLOAT UTILITY 

41 

1353 

432 

33 : 1 

10.5:1 

(body) 


(1335, 18, 0) 

(428, 4, 0) 



TOTAL 

653 

17946 

6180 

27.5:1 

9.5:1 


(16371, 144, 1431) (4695, 54, 1431) 


KEY: (code, literals, data) 


COMPILER COMPARISON 
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HEAP - A COLLECTION OF TASK STACKS PLUS A GENERAL USER 
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FORTRAN PDL EXAMPLE 


SUBROUTINE STATE TRANSITION 

Xl(l) - FLOAT (WXC , 1 , -5 ) ** CONVERT INPUTS TO FLOATING POINT 

XI (2) = FLOAT (WYC , 1 , -5 ) 


XI ( 9 ) = FLOAT (VRZ, 1,-65) 

TPS = TP ** SAVE THE CURRENT PROPAGATION INTERVAL 



X2 (1) * HALF (TP*TP) ** COMPUTE INTERMEDIATE VARIABLES 

X2(2) = (X2 (1) *TP)/3.0 ** NEEDED FOR THE MATRICES 

X2(3) = XI (1) * XI (1) ** COMPUTATIONS 

X2 (4 ) - XI (2 ) * XI (2 ) 

X2 (5) = XI ( 3 ) * XI ( 3 ) 

X2 (6) = Xl(l) * TP 
X2 (7) = XI (2) * TP 
X2(8) = XI ( 3 ) * TP 
X2 (9) = X2 ( 3 ) + X2 (4 ) + X2(5) 

X3 (1) = Xl(l) * XI (2 ) 

X3 (2) = Xl(l) * XI ( 3 ) 

• • • 

m m m 

X3 (9) = XI (2 ) * X3 ( 7 ) 

X4 ( 1) = XI (3 ) * X3 ( 7 ) 

X4 (2) * Xl(l) * X2 (1) 

• mm 

• mm 

X4 (7) = X3 ( 3 ) * X2 (2 ) 

** COMPUTE THE ELEMENTS OF THE STATE 
** TRANSITION MATRIX 
FM11(1) = 1.0 - (X2 (4) + X2 (5) ) * X2(l) 

FM11 ( 4 ) = X2 ( 8 ) + X3 (4 ) - X4(l) 

FM11 (7 ) = -X2 ( 7 ) + X3 (5) + X3(9) 

FM11 (2 ) = -X2 (8) + X3 (4 ) + X4(l) 

FM11 (5) = 1.0 - (X2 ( 3 ) + X2 ( 5) ) * X2(l) 

FM11 (8 ) = X2 (6) + X3 (6) - X3(8) 

FM11 ( 3 ) = X2 (7 ) + X3 ( 5 ) - X3(9) 

FM11 (6) « -X2 (6) + X3 ( 6 ) + X3(8) 

FM11 (9) = 1.0 - (X2 ( 3 ) + X2 ( 4 ) ) * X2(l) 

FM12 ( 1 ) = -TP + (X2 (4 ) + X2 ( 5 ) ) * X2(2) 

FM12 (4 ) - -X4 (4 ) - X4 ( 5 ) 

FM12 (7) = X4 (3) - X4 (6) 

FM12 (2) - X4 (4) - X4 (5) 

FM12 (5) = -TP + (X2 ( 3 ) + X2(5)) * X2(2) 

FM12 (8) - -X4 (2) - X4 (7) 

FM12 (3) = -X4 (3) - X4 (6) 

FM12 (6) = X4 (2) - X4 (7) 

FM12 (9 ) = -TP + (X2 ( 3 ) + X2(4)) * X2(2) 


END 



ADA PDL EXAMPLE 


package UF_PROC is 

type MATRIX is array (INTEGER range <>, INTEGER range <>) of FLOAT; 

subtype MATRIX3X3 is MATRIX ( 1 . . 3 , 1 . . 3 ) ; 

XI ; MATRIX3X3; 

X2 : MATRIX3X3 ; 

X3 : MATRIX3X3 ; 

X4 : MATRIX3X3 ; 

StateTra_Blkll : MATRIX3X3 ; 

StateTra_Blkl2 : MATRIX3X3 ; 

end UF PROC; 


77 

package body UF_PROC is 



78 




79 

procedure STATE TRANSITION MATRIX is 

80 




81 

begin 



82 

— compute the elements 

of the state transition matrix 

83 

— NOTE ; X3 (1 , 1) 

= propagation time interval 

84 

X3 (2,3) 

= SIN (W*Dt) 

85 

X3 (3,3) 

= 1 - COS (W*Dt ) 

86 

X3 (2,1) 

= (1 - COS (W*Dt) ) /W 

87 

X3 ( 3 , 1) 

= Dt - (SIN (W*Dt) /W) 

88 




89 

for i in l . . 3 



90 

loop 



91 

for j in 1 . . 3 



92 

loop 



93 

StateTra Blkll(i 

j) : 

= +X3 (2,3)*Xl(i,j) +X3 ( 3 , 3 ) *X2 ( i 

94 

StateTra Blkl2(i 

j) : 

= -X4 (2,l)*Xl(i,j) -X4 ( 3 , 1 ) *X2 ( i 

95 

End loop; 



96 

End loop; 



97 




98 

StateTra Blkl 1(1,1)“" 

= 1. 

0 + StateTra Blkl 1 (1, 1) ; 

99 

StateTra Blkll(2,2) 

= 1. 

0 + StateTra Blkll(2,2); 

100 

StateTra Blkll(3,3) 

= 1. 

0 + StateTra Blkl 1(3, 3); 

101 




102 

StateTra Blkl2(l,l) 

= -X3 (1,1) + StateTra Blkl2(l,l); 

103 

StateTra Blkl2(2,2) 

= -X3 (1,1) + StateTra Blkl2(2,2); 

104 

StateTra_Blkl2 (3,3) 

= -X3 (1,1) + StateTra Blkl2(3,3); 

105 




106 

end STATE TRANSITION MATRIX; 


107 





108 end UF_PR0C ; 

109 


NSSC-I ASSEMBLY LANGUAGE EXAMPLE 


* 


* 

It 


FM11(1) = 

3026 


FLD 

3026 

060220 

BRM 

3027 

002367 

DATA 

3030 


FADD 


000005 

USE 

3030 

060244 

BRM 

3031 

002346 

DATA 

3032 


FMPY 


000005 

USE 

3032 

060253 

BRM 

3033 

* 

002323 

DATA 

* 


X4 (8) = X 

3034 


FST 

3034 

060222 

BRM 

3035 

002467 

DATA 

3036 


FLD 

3036 

060220 

BRM 

3037 

002502 

DATA 

3040 


FSUB 


000005 

USE 

3040 

060251 

BRM 

3041 

002440 

DATA 

3042 


FST 

3042 

060222 

BRM 

3043 

002145 

DATA 


1.0 - (X2 (4 ) + X2 (5) ) * X2 ( 1 ) 

X2+9 * FLT. PT. LOAD 

0FLD * SUBROUTINE CALL 

X2+9-0FLD 

X2+12 * FLT. PT. ADD 

PROG 

0FADD * SUBROUTINE CALL 

X2+12-0FADD 

X2 * FLT. PT. MULTIPLY 

PROG 

0FMPY * SUBROUTINE CALL 

X2-0FMPY 

(1) * (X2 (4 ) + X2 ( 5) ) 

X4+21 * INTERMEDIATE 

0FST * VALUE 

X4+21-0FST 

FONE * 1.0 

0FLD * SUBROUTINE CALL 

FONE-0FLD 

X4+21 * FLT. PT. SUBTRACT 

PROG 

0FSUB * SUBROUTINE CALL 

X4+21-0FSUB 

FM11 * FINAL RESULT 

0FST * SUBROUTINE CALL 

FM11-0FST 


SUBROUTINES CALLED: 

FLD, FADD, FMPY , FST, FSUB 


THE FIRST COLUMN IS THE NSSC-I MEMORY LOCATION IN OCTAL. 

THE SECOND COLUMN IS THE 18-BIT CONTENTS OF THE MEMORY LOCATION. 
THE THIRD COLUMN IS THE INSTRUCTION MNEMONIC. 

THE FOURTH COLUMN IS THE OPERANDS FOR THE INSTRUCTION. 


THE FIFTH COLUMN IS A COMMENT FIELD 



ADA ASSEMBLY LANGUAGE EXAMPLE 


; Source Line 98 


0188 

8220 

LD4 

#1,R2 

0189 

F420 

CMPRNG 

R2 , $C$04098$00000 

018A 

0000 



018B 

7503 

BZ 

%*+3 

018C 

7EF0 

CALL 

@-CP, rts . raise . constraint . error 

018D 

0000 



018E 

B220 

SUB4 

# 1 , R2 

018F 

C02 0 

MULS 

$C$04 098 $00000+2 , R2 

0190 

0002 



0191 

50F0 

SETI 

# 15 , rts . unsigned . ar ith . flag 

0192 

0000 



0193 

4A2 1 

ADD 

#$P$04 098 $00000+7 2 , R2 

0194 

0048 



0195 

53F0 

CLRI 

#15, rts. unsigned. ar ith. flag 

0196 

0000 



0197 

8132 

MOV 

R2,R3 

0198 

8643 

LDL 

0 (R3 ) ,R4 

0199 

0000 



019A 

8620 

LDL 

$C$04099$00000 ,R2 

019B 

0000 



019C 

A924 

ADDF 

R4,R2 

019D 

8240 

LD4 

#1,R4 

019E 

F440 

CMPRNG 

R4,$C$04098$00000 

019F 

0000 



01A0 

7503 

BZ 

%*+3 

01A1 

7EF0 

CALL 

@-CP, rts . raise . constraint . error 

01A2 

0000 



01A3 

B240 

SUB4 

#1,R4 

01A4 

C040 

MULS 

$C$04 098 $0000 0+2 , R4 

01A5 

0002 



01A6 

50F0 

SETI 

# 15 , rts . unsigned . ar ith . flag 

01A7 

0000 



01A8 

4A41 

ADD 

#$P$04 098 $00000+7 2 , R4 

01A9 

0048 



01AA 

53F0 

CLRI 

#15, rts. unsigned. ar ith. flag 

01AB 

0000 



01 AC 

8154 

MOV 

R4,R5 

01 AD 

9625 

STL 

R2 , 0 (R5) 

01AE 

0000 




THE FIRST COLUMN IS THE 1750A CO-PROCESSOR MEMORY LOCATION IN HEX. 
THE SECOND COLUMN IS THE 16 -BIT CONTENTS OF THE MEMORY LOCATION. 


THE THIRD COLUMN IS THE INSTRUCTION MNEMONIC. 

THE FOURTH COLUMN IS THE OPERANDS FOR THE INSTRUCTION. 
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Introduction 

Space Station has chosen Ada as the language of choice for all new Space Station opera- 
tional software. The embedded applications inherent in the onboard computer architec- 
ture made Ada a logical choice, although the lack of Ada experience was a major con- 
cern. So, in support of the Electrical Power System (EPS), research and development 
activities, the Ada Control Program for the Phase I PMAD PV Testbed was initiated. 
Since that time, the Ada software has evolved from a relatively simple Ada application to 
a more complex embedded Ada project. The purpose of this presentation is to show the 
progression of the Ada software applications, the lessons learned, and the problems en- 
countered in applying Ada to a real-time, embedded, power management and distribution 
(PMAD) system. 
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Evolution of Ada Software Experience 



Ada software experience began with the development of an Ada control program for the 
Phase I, PMAD PV testbed. The testbed hardware was modeled by Ada simulation soft- 
ware and consisted of a solar array field, a battery bank, a battery charge converter, two 
load banks, a DC distribution bus, and remote power controllers. This project served as a 
learning and evaluation phase of Ada for embedded applications. It should be noted that 
each testbed consists of different system configurations and that each of these represents 
independent software development efforts. The PMAD System Testbed and the PMAD 
Integrated Testbed are currently under development and will be discussed briefly. The 
PMAD PV Testbed software is complete and will serve as the focal point of discussion. 








• INTEL 8086 based microprocessor environ- 
ment 

• Originally written in FORTRAN 


• Utilizes the PAMELA design methodology 


The Phase I PMAD PV Testbed hardware consists of a solar array field for power genera- 
tion, a battery bank for power storage, a DC distribution bus, remote power controllers 
(RPCs), and a DC to DC charge converter. Simulation software, which characterizes each 
hardware component, provided the operating environment for the Ada control software. 
The software runs on the VAX 11/785 under the DEC Ada compiler for initial debugging 
and is then crossed compiled with the Softech Ada-86 compiler to the iSCB 8086 micro- 
processor hardware. 

The same control and simulation software had previously been written in FORTRAN 
when this project began. This provided interesting comparisons but resulted in very little 
documentation and the Ada project started out as a re-coding effort rather than a soft- 
ware development effort. After 10 months into the project, the Ada development team 
decided to retrofit parts of the software development lifecycle to the project. The testbed 
hardware requirements were established and the PAMELA design methodology was fol- 
lowed. 
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^ Space Station 



20 LOAD BANK SWITCHES 
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Control Software Design 

% PAMELA 1 was ideal for designing with Ada tasks but not 
as well suited to sequential programming 

# PAMELA 2 has since been introduced which solves this 

• Easy to follow, step by step, REPEATABLE, methodology 

0 Design diagrams are done with a drawing tool 


The design phase of the Ada controls program utilizes the PAMELA design methodology. 
PAMELA is an acronym for Process Abstraction Method for Embedded Large Applica- 
tions, developed by George Cherry. The Ada control program design consists of a series 
of graphs which build the program both graphically and textually. The External Object 
Graph and a simplified Master Subprogram Graph are included here as a top level de- 
scription of the Controls software design. PAMELA is an easy to follow, REPEATABLE 
design methodology which can be documented with a drawing tool. Keep in mind though, 
a drawing tool does not provide any traceability, consistency checking or automated PDL 
generation. 

PAMELA 2 is a second generation of PAMELA 1. in which even the acronym has been 
changed to reflect the extended applications of PAMELA 1. PAMELA 2 now stands for 
Pictorial Ada Method for Every Large Application and consists of a standardized, seman- 
tically rich, graphical notation which can be applied to the entire software lifecycle. 
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External Object Graph 


Solar 

Array 


Array_Short I Load(n) .Stat 


Array OpenV 





Ba tte ry_Te m pe ra tu re Power 

Battery V ^ Controller Bus I 
Battery _I ^ A/f — RPC(k)_Status 


Converter 

ControlV 


his V Bus I 


Battery 

Bank 


Converter 

OutV 


Converter I 
OutI 


Charge 

Converter 
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System Power Controller Master Subprogram Graph 


Array_ShortI 


I Solar 
Array 
Array_Ouiv | Controller 


Array Power 
Array_ShortI 


RPC(k) Statusl 


RPC(n). State 


Battery 

emperatu 


RPC 

Controller 



Charge/Discharge 
Control Sknal 


Battery Battery^V 
Controller BatteryJ 



System efu kx M us 

Power Load Control Signal 

Controller 


Admittance/ C \ 

L — 4 Load(n) . 

I Load Isiaius^ 

\ Controller J 

Load(n). Status \ S 








The Ada development environment consisted of a DEC VAX 11/785 connected to the 
INTEL Development System, which was tied to a bare 86-30 single board computer via 
an in-circuit emulator. This environment proved to be very slow and cumbersome. It 
became apparent that Ada was not as ’’transportable” as it claimed to be and that a 
compiler could pass validation but that did not necessarily mean that it was a production 
quality compiler. The controls and simulation software could successfully compile and 
execute on the VAX and complete cross-compilation on the VAX but the execution on 
the iSBC 86-30 board was beyond the abilities of the Softech Ada-86 run-time environ- 
ment. 
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Ada vs Fortran 

Lines of Code 

1100 

1600 

Executable Statements 

900 

1500 

# of Modules 

13 

6 


Steady State 
Execution Speed 


Embedded 
Execution Speed 


No noticeable difference for 
steady state execution 


NOT Real-Time Real-time 


Listed are some empirical relationships drawn from the Ada and Fortran control pro- 
grams. Even though the metrics are based on the implementation of only one problem, ^ ~ 

they provide significant evidence supporting the desirability of a high order language such * 5 

as Ada. The difference in the executable statements is the most notable. This is ac- 
counted for by comparing the language constructs in Ada to those in Fortran. For exam- =3 , 

pie, exception handling in Ada eliminates the need for flag variables that are repetitively 
set and checked for fault conditions. Also, the number of modules in Ada is more than ^ l 

double the ones used for the Fortran equivalent. The higher modularity of the Ada pro- fill ’ 

gram is a direct result of software engineering principles such as a structured design 
methodology, reusability, and increased efficiency. The steady state execution speed was | 

compared on the VAX 1 1/785 with no noticeable difference, but, once the application is ** . 

embedded on the 8086, the execution is bogged down by the run time environment. At = = I 

this time though, proof of concept was more critical than real-time execution. Also, note ~ f 

that the extent of the listed differences is likely to vary from one application to another 
and the metrics used are generalizations and should not be used as absolute conclusive ^ } 

results. 
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% Ada requires well-educated software engineers 
# DO NOT code Ada from another language 

% The requirements specification and design will determine 
the success or failure of a project. 


All Ada compilers are not created equal 
*Both functional and performance differences 


The main lesson learned was that Ada requires well-educated software engineers. The 
training program currently followed includes a week long Introduction to Ada, with 
hands-on training as a course requirement. This is followed with a course in a software 
design methodology such as PAMELA or Object Oriented Design. Then, once the devel- 
opment team gains some experience in writing Ada code, a follow up Advanced Ada 
course is scheduled. A Software Engineering course is also recommended, which in- 
cludes a discussion of the software lifecycle, its phases, products and activities. Class- 
room training which provides hands-on experience is the most effective for people ready 
to start coding in Ada, but for managers a day of Ada terminology and its benefits is 
more appropriate. Other forms of training such as video tapes or computer aided instruc- 
tion are available to anyone at any time. 

The objectives of this project were to demonstrate and evaluate the abilities and limita- 
tions of the Ada programming language for an embedded microprocessor application. 
Since that time, there has been a vast improvement in the availability and performance of 
target compilers. The objectives were met and the development team learned a great deal 
about Ada. 
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PMAD System Testbed 


Multi-Processor Power System Testbed 


# Currently in the design phase, implementing Object Ori- 
ented Design techniques 


Configuration managed with the SSE Automated Product 
Control Environment (APCE) 


The PMAD System Testbed is a multi-processor system used to control the hardware as 
shown in the following diagram. The purpose of the power system testbed software is to 
provide an environment for testing various control algorithms and newly developed hard- 
ware. The software can be broken down into two types: the system environment software 
and the algorithms under test. The algorithms under test include any algorithms written 
to control the power system. The Power Management Controller is connected to the other 
control processors via the Ethernet communications protocol. Processor status and power 
system component information is available to any processor requesting that information. 
The Power Component controllers are connected directly to the power component via a 
1553 interface. The software is currently in its design phase and the development team is 
implementing Object Oriented Design techniques. The software development lifecycle is 
configuration managed with the Space Station Software Support Environment (SSE) Auto- 
mated Product Control Environment (APCE). 
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PMAD System Test Bed 
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NOTE all componenti shown are single string (no redundancy) 
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System Decomposition Chart for a Single Processor 


Each of the distributed processors shall contain the main program, unique to that control ® s 
processor function, which communicates with a common set of interface packages. These 
packages include the following: a text interface which provides an operator interface to ' ; 

the system for debugging capabilities; a standard control algorithm interface so that proto- 
type control algorithms may be easily incorporated into the system and tested; a router or ^ 
messenger package which standardizes all the inter-process communications to the Ether- 0 ? 

net; a power component package which communicates to the power components via the 
1553 data bus; and a graphics interface which shall receive, interpret and display com- §j | 

mands from the PC/AT graphics connection. A functional block diagram is shown in the ™ l * 

following diagram. The development team is currently evaluating the ALSYS Ada 8086 _ 

family of cross-compilers for this application. 0 I 


I 
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Experience with the APCE 


# The project documentation is under configuration control. 

# Traceability pointers have been defined for all the software 
requirements. 

0 The mechanics of using the APCE are difficult to learn. 

0 Currently unable to transfer design diagrams to the SSE 
mainframe. 

# PRC support has been excellent. 


The APCE database for the Power System Test Bed Software contains all the documenta- 
tion under configuration control. The system requirements have been identified, and 
pointers have been defined which establish the traceability of requirements throughout the 
lifecycle. The mechanics involved in entering the information into the APCE has proved 
to be difficult at times. To use the APCE effectively requires that the user learn the 
APCE project language. For example, the phases, products, and sections are identified 
with two or three letters, i.e. ”RD SR ALL” is the Software Requirements Document, in 
the requirements definition phase, and includes ALL the sections. Once the project base 
has been established, the APCE is relatively easy to use for the developers and testers. 
The tester takes on a major role throughout the software lifecycle by defining test proce- 
dures to verify and validate each step in the lifecycle. The PMAD project is currently in 
the detailed design phase, but at this time we are unable to place the design diagrams 
under APCE control. Although, as the development team completes their detailed design 
the APCE team is defining test procedures to run against the code as soon as it is pro- 
moted to the APCE. Planning Research Corp., PRC, has provided excellent assistance 
and guidance throughout the project, particularly in the area of software testing. 
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PMAD Integrated Testbed 

9 Representative of the Space Station PMAD System. 

0 Currently in the initiation/requirements definition phase. 

# Shall be used to evaluate overall PMAD system perform- 
ance and to address system level issues. 


The PMAD Integrated Testbed (ITB) is a 20kHz power system testbed consisting of the 
components shown in the following diagram. The major items of the ITB include the DC 
Switching Units, the Main Bus Switching Units, the Power Distribution and Control Units, 
and the Main Inverter Units. The software control system shall monitor, evaluate, and 
control the ITB performance from the power sources to the loads. In addition, the control 
system shall monitor and control feeder, bus, and component electrical loads. The ITB is 
currently in its initiation/requirements definition phase and shall be used to evaluate over- 
all PMAD system performance and to address system level issues. 


03k 
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Space Station Electrical Power System 

# Work Package 04 C/D contractor is Rockwell Interna- 
tional, Rocketdyne Division. 

# Software Lines of Code Estimation = 90,000 SLOCS 


% Software is broken up into 9 CSCIs, the use of Ada is a 
program requirement. 



The Space Station Project is divided into 4 work packages, each divided into two phases. 
NASA Lewis Research Center and its prime contractor, Rocketdyne, is Work Package 04 
and is responsible for the derailed design, development, test, evaluation, and construction 
of the electrical power system. Initially, power will be provided by eight solar array 
wings, phase two shall incorporate a solar dynamic power module. The power system 
software is broken down into nine Computer Software Configuration Items (CSCIs) which 
include a Power Management Controller, a Node Switching Controller, a Power Distribu- 
tion Controller, a Main Bus Switching Controller, a Photovoltaic Controller, a Solar Dy- 
namic Controller, a Solar Dynamic Engine Controller, a Main Inverter Unit, and a Fre- 
quency Changer Unit. The total estimated software lines of code are 64,800 SLOCS and 
will be written in Ada. The Space Station Software Support Environment tools, rules and 
standards shall apply to all operational software for the Space Station. 
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Conclusion 


Space Station is committed to Ada 


Space Station software demands embedded, real-time per- 
formance 


9 Ada compiler technology must improve 


In conclusion, the Space Station project is committed to the use of Ada. NASA Lewis 
Research Center has been involved in the implementation of Ada for the Power Manage- 
ment and Distribution System for over three years and have confronted major issues in 
the use of Ada, of which all of these can be overcome with the improvement in Ada host 
and target compiler technology. The Ada language itself requires intensive training in the 
use of Ada as well as in modern Software Engineering techniques. Finally, the Space 
Station imposes very stringent demands on the capabilities of the Ada language and the 
compiler technology has to keep pace with these demands for the application of Ada to be 
successful. 
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REUSE OF DEVELOPED COMPONENTS 
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REHOSTING IS REUSE IN DISGUISE 
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REHOSTING OF ADA, CONTINUED 



THROUGH THE PROCESS OF REHOSTING, MACHINE DEPENDENCIES ARE 
DETECTED, REWORKED, AND ISOLATED 
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PIWG BENCHMARKS 

* PIWG COMPOSITE 

* TRACKER 

* TASK CREATION 

* ARRAY ELABORATION 

* EXCEPTION 

* CHAPTER 13 

* PROCEDURE 

* TASKING 

* DELAY 

* COMPILATION SPEED 

* DISK SPACE RQMTS. 

RUNTIME 

* GARBAGE COLLECTION 

* SYSTEM SERVICES 

* EXCEPTIONS 

MATURITY 

* AGE 

* ROBUSTNESS 

* OPERATIONAL CONSTRAINTS 

MISCELLANEOUS 

* SELF COMPILED ADA 

* UNIQUE FEATURES 
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FIRST ANNUAL SURVEY OF MISSION CRITICAL APPLICATION 
REQUIREMENTS FOR Ada RUNTIME ENVIRONMENTS 
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10% TOGETHER. 





Session 3: DIRECTIONS AND IMPLICATIONS 

1. Robert Nelson, NASA/Space Station Freedom Program Office 

2. Glen Freedman, Univ. of Houston at Clear Lake 

3. Garry Walker, JPL 

4. Frank McGarry, NASA/GSFC 
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Provides point of contact regarding all software issues between Level n, 
the Internationals, other NASA codes, and SSFP customers. 

Responsible for Software Support Environment Project 
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The Software Requirements Reviews will provide insight into 
software management and compliance with program policies . 
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Credits Where Credits are Due 






Ada Development Laboratory 


The Jet Propulsion Laboratory: 
Transition to Ada Software Development 


Gary N. Walker 
1 December 1987 


Ada Development Laboratory 


Catalysts for creation of .TPL Ada 


Development Laborator 


Limited JPL experience with Ada 

Global Decision Support System 

-- Command and Control System for Military Airlift Command 

- 279K Lines of Ada Code (374 L.O.C. with comments, etc.) 

- 12 - 15 Subcontractors 

- Interfaced with RDB and GKS through Fortran, C, and Macro 

JPL commitment to software development improvement 

SSORCE burden funded software development organization 

- SORCE to sharpen software engineering methodologies and standards 

- SERC to support systems engineering and system management 

- SPARC to support software product assurance programs 
-- SI&TRCE to support systems integration and test 

- OPERC to support operations engineering 

JPL’s need to keep in step with technology 
and sponsors' needs. 

- Ada support for current software engineering methodologies 

- Increasing number of NASA, FAA, and DoD Ada directives 


JPL management realized that better tools are required. 


— Save money 

- Save time 

- Improve consistency 

— Improve quality 



Ada Development Laboratory 


A centralized JPL Ada Development 
Laboratory intended to : 

— Provide Ada tools for development 

Lack of tool continuity: Most JPL work is done on a project basis. 
Projects procure equipment and software tools necessary for a given 
work unit. In most cases, tasks return tools as deliverables. 

Lab management decision to make institutional commitment to a 
centralized facility to benefit a wide spectrum of tasks and provide 
for continuity. 

— Train and educate JPL personnel 
-- Provide a testbed for metrics study 
— Provide a source of consultation assistance 


— Promote Ada and software engineering practices 
(users’ group, etc.) 


Ada Development Laboratory 


Training and Education: 


Educate 


Train 


Management 

Sponsors 

Architects & Engineers 
Programmers 


X 


X 


X 

X 

X 

X 


Training includes developing proficiencies in the use of 
Ada, software engineering tools, and environments. 

Education includes: 

— What are "good" software engineering practices? 

-- What Ada is? 

-- What Ada is not? 

— What Ada will do for development? 

-- What Ada will do to development? 




Ada Development Laboratory 


r 

Staff Development: 


Training 

-- Rational Fundamentals 
— Advanced Topics 

— Basic Subsystems and Configuration Management 

-- Networking 

-- Design Facility 

-- Target Build Facility 

-- Cross Development Facility 

-- Project Design Methodology 

— Ada fundamentals 


Education 

-- Management class 

— Seminars on concept of dealing with Ada 


J 


Ada Development Laboratory 




ADL Facility and Equipment Suite: 



^ ‘ILAN 


1300 Sq. Ft. development center being built 
Reuse of an existing VAX 

Institutional purchase of Rational R1000 Model 20 

Microcomputer equipment support 
-- Design tools 
— Ada compilers 
- Ada tutorials 
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Rational; 

The Rational Ada Development System 

• Validated Ada® compiler 

• Ada-specific productivity tools 

• Networking compatibility with ILAN and TCP/IP 

• Configuration management and version control 

• Workorder/change tracking 

• Statistics collection 

• Standardized documentation generation 

• A user/vendor customizable user interface 
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Rational: 


Advantages of Using a Universal Host Environment 

- High degree of parallelism can be built into schedules 

- Selection of the host hardware architecture and operating system can be delayed 

- Training and tool development in a common environment 

- Project managers are more flexible to move staff among tasks for different targets 

- Tools have permanence and are reuseable 

- Incremental compilation provides rapid turnaround 

- Host/target debugging uses universal host environment while working on target 
-- Common and host specific code are manageable in the same environment 


Universal Host Development 

Non-Embedded 

Application Rational R1000 


Embedded 

Applications 










PROIFCT DEVELOPMENT 

MANAGEMFNT DOCUMENTATION ACTIVITY 

MAiNAl^MhlNI DELIVERY 


Ada Development Laboratory 


The Software Lifecycle and Rational Tools 




Rational Design Facility 


Target Build Utility 
Zross-Development Facilities 


Rational Subsystems 

Configuration Management and Version Control 

Mail 


Rational Environment 






Ada Development Laboratory 


Current Ada Activities at JPL: 


Network Operations Communications Center Upgrade 

— Development on Rational and VAX 

- Target Host is to be determined 


Ground Communications Facility Upgrade 

- Development on Rational and Gould 

- Target Host is Gould 


ASAS/ENSCE 

-- Development on Rational and VAX 
— Target Host is VAX 


Realtime Weather Processor 

- Development on VAX 

— Target Host is VAX 




Ada Development Laboratory 
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Problems to he Addressed: 


Manpower 

-- Hiring 
- Maintaining 
— Training 


Who should purchase? 


VAX Type Ada Compiler 
(iVAX II $ 15.7K 

11/780 $ 31.7K 

8600 $ 57.5K 

8800 $ 70.6K+ 


VAXSET Ada Environment 
$ 16.4K 
$ 33.1K 
$ 60.2K 
$ 98.6K+ 


For what work is Ada appropriate? 


What Ada features should be used? 


How should compiler compatibility be studied? 


How should tool development be funded? 


Hew r' uld reuse libraries be maintained? 
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Ada/PROMISES 






Increased Management Visibility 
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Fred Brooks "No Silver Bullet" 



Ada PROJECTS IN FLIGHT DYNAMICS DIVISION 



D217.003 




SOFTWARE CHARACTERISTICS 
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. Ada RESULTS IN LARGER SYSTEM (SL0C) 
. REUSE TREND VERY POSITIVE 
. “'LINE OF CODE" DEFINITION CRITICAL 



Ada IMPACTS ON LIFE CYCLE EFFORT DISTRIBUTION 
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EFFORT DISTRIBUTION BASED ON PHASE DATES (£.G. END DESIGN, END CODE, END TEST) 
PARTIALLY BASED ON ESTIMATES TO COMPLETION 





Ada COST/PRODUCTIVITY 



ORIGINAL PAGE fS 
OF POOR QUALITY 




USE OF Ada FEATURES 












Ada AND ERROR/CHANGE RATE 
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ORIGINAL PAGE !S 
OF POOR QUALITY 


*SL0C = TOTAL LINES (INCLUDES COMMENTS/REUSED) 




ERROR CHARACTERISTICS 



ORIGINAL PAGE IS 
OF POOR QUALITY 


• Ada ERROR PROFILE CHANGES WITH MATURITY OF USE 

• Ada HELPS CUT INTERFACE ERRORS 
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Experience Base is Small and 
Growing Too Slowly 



EVOLVING IMPACTS OF Ada 
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EXPERIENCE BASE • EVOLUTION TO ADA (FROM STANDARD FORTRAN) - 10 YEARS + 

• CURRENT EXPERIENCE BASE IS GROWING TOO SLOWLY 
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PLANS FOR BUIDLING BASE - MINIMAL (LOOKING TOWARD OJT) 



IMPLICATIONS/OBSERVATIONS 
(Generalizing to NASA) 



Critical need for Software Measurement 

NASA Infrastructure Heading in Supportive Direction 





IMPLICATIONS/OBSERVATIONS 
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PLANNING FOR 'Ada' HAS BEEN 
INADEQUATE 



EVOLVING TO Ada 
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DIRECTIONS WITH Ada 
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DIRECTIONS WITH Ada IN NASA 
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OPEN DISCUSSION 


Moderator 

Ed Seidewitz, Goddard Space Flight Center 
Panelists 

Gary Walker, Jet Propulsion Laboratory 
Michael Holloway. NASA Langley Research Center 
William Howie, NASA Marshall Space Flight Center 
Frank McGarry, NASA Goddard Space Flight Center 
Robert Nelson, NASA Space Station Program Office 
Kathy Rogers, MITRE (for NASA Johnson Space Center) 

Recorder 

Dwight Shank, Computer Sciences Corporation 


The final session ot the symposium provided the opportunity for an active, open discussion between the 
audience and panelists representing various NASA centers. The following is not a transcript of the session, 
but is instead an attempt to summarize some key points addressed during the discussion. These points 
are organized into broad areas which reflect the general themes which emerged during the course of the 
symposium. 


Transition 

There are both management and technical issues involved in the transition to Ada. The panel was asked to 
address the issue of managing the risk ot transition. Bob Nelson remarked on the need for a risk management 
approach and on the management of risk at the project as well as the organizational level. 

There were also comments from the audience on specific projects which addressed risk management. Fileen 
Quann of Fastrak Training mentioned that risk management was an important consideration in the decision to 
use Ada for the Second TDRSS Ground Terminal project at Goddard. A representative from Logicon related 
that there was much emphasis on risk management in the study of Ada by the FAA. The FAA also ultimately 
decided to use Ada for their Advanced Automation System. 

Another transition issue is the “conversion” of programmers to Ada. Programmers are known to often be 
quite loyal to a particular language. However, Frank McGarry noted that once people begin to use Ada on 
real projects, they do not want to go back to the language they used before. Fd Seidewitz mentioned that 
Rational had begun early development with a large number of LISP programmers, who became strong Ada 
converts and refused to maintain their previous LISP code. 

There can be, nevertheless, considerable resistance to the switch to Ada. A representative from PRC com- 
mented that experienced C and Pascal programmers consider Ada to have “too much overhead” and they 
complained that “Ada was designed to control the programmer.” Gary Walker remarked that the transition 
Irom MODULA II to Ada is easier. MODULA is now taught in several schools. 


Methodology 

There is an increasing emphasis on the use of object-oriented design with Ada. However, there was some 
concern in the audience about the maturity of object-oriented methodologies. 

I’d Seidewitz replied that the problem is partly that different people mean different things by the term 
“object-oriented design.” Nevertheless, there are some important, useful concepts which are common to all 



object-oriented approaches, such as abstraction and encapsulation. The object-oriented methodology devel- 
oped by and used in the Flight Dynamics Division at Goddard has proven effective so far. though more 
experience is needed on judging the quality of proposed designs. 

Kathy Rogers commented that a major issue is the scaling up of object-oriented approaches to larger and more 
complex systems. Eric Booth of CSC stated that they had run into a wall with the original object-oriented 
approaches at sizes of 200 to 300 thousand lines of code. However, much of this problem could be over- 
come by the use of the object-oriented “subsystem” concepts. Ed Seidewitz indicated that with such tech- 
niques, he believes object-oriented design can readily scale up to large systems. 


Training 

Several speakers during the symposium stressed the importance of effective training and especially the gaining 
of hands-on experience in the use of Ada. The panelists were asked how big they felt a training project had to 
be to give new Ada programmers practical experience. 

Frank McGarry felt that the Electronic Message System (EMS) project used for early training in the Goddard 
Flight Dynamics Division was of marginal size at 8 to 10 thousand lines of code. Ed Seidewitz remarked that 
EMS would have been a better exercise if it had been more directly applicable to the application domain of 
the division. However, such training projects are often difficult to formulate. 

Glenn Freedman commented from the audience that the real scaling issue was complexity, not size. He be- 
lieves that a good pilot project is a complete Ada Artifact, such as that being considered by the Software 
Engineering Institute, on which students can build. 


Reuse 

There was a strong interest in ways to promote the reuse of code across projects. However, there was also a 
feeling that current contracting approaches discourage this. Bob Nelson expressed the need for contractual 
mandates for reuse. 

Effective reuse also requires a common repository of quality reusable components. Cora Carmody from PRC 
mentioned that the space station Software Support Environment (SSE) will apply qualification criteria to 
software in its reuse library. Components will have to meet both functionality and complexity requirements. 
The exact method for doing this is still under development. 

Kathy Rogers commented that the space station project also plans to reuse more than code. This includes the 
reuse of such things as requirements and staffing plans. 


Real-Time 

There was considerable discussion of the use of Ada in embedded, real-time applications. There are still con- 
cerns with the performance of Ada in time critical situations, especially when tasking is involved. The panel 
seemed to feel that the problems right now were mostly with poor implementations, rather than with flaws in 
the language itself. 

Frank McGarry stated that he felt that Ada implementations were not yet ready for real-time applications, but 
that most software does not have real-time requirements. On the other hand, Bob Nelson said that these 
issues were being addressed for the space station through ongoing prototyping, and that early indications are 
that Ada is OK for real-time. 

Dan Rov of Ford Aerospace commented from the audience on the great improvement certain implementa- 
tions have made in reducing the time for a synchronous rendezvous, down to 25-500 microseconds. He also 




mentioned that if one has problems with tasking, it is possible to do real-time applications using a non-tasking 
subset of Ada. This should be just as easy as doing these applications in other non-tasking languages, with 
similar performance. 

Stephen Leake from the National Institute for Standards and Technology described his work on the use of 
Ada for NASA Flight Telerobotie Servicer robotics software. At Goddard they are currently reimplementing 
a robotic control system in Ada. He believes that the Ada system is much better than the original and that the 
execution speed is good. 

There was general agreement that it is very important to choose a good compiler if you need to make effective 
use of tasking. However, there was still some concern with the fundamental Ada tasking paradigm for hard 
real-time applications. There was disagreement on how far the Ada 9X standard revision will go in altering the 
tasking model, though the Ada 9X process will certainly address tasking issues. 

Besides execution speed, there were some remarks on the varying Ada source-to-machine-instruction expan- 
sion ratios presented by various speakers. Kathy Rogers commented that this is highly implementation depen- 
dent and that it is improving. However, Dan Roy responded that he did not feel that such expansion ratios 
were really important measures, and Bill Howie did not even consider them valid. 


Conclusion 

To conclude the session, the moderator asked each panelist how he or she would advise a new NASA adminis- 
trator to ease the transition to Ada. 

Gary Walker felt that NASA headquarters should not make edicts, but should give support to the centers. 

Michael Holloway throught that it was important for Langley to catch up to the other centers in the use of 
Ada. 

Bill Howie stated that the most important thing is to promote education and training, to both technical and 
management personnel. 

Frank McGarry felt that NASA headquarters should go beyond just supporting the use of Ada, and actually 
mandate Ada as the common NASA language. 

Bob Nelson, however, was uncomfortable with the idea of a mandate, saying that people in NASA are not 
used to such dictates from headquarters. He stressed, instead, the importance of incentives to promote the 
use of Ada. 

Finally, Kathy Rogers felt that NASA should revisit the software development life cycle and replace the 
inadequate waterfall model. 
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FIRST NASA ADA USERS’ SYMPOSIUM 
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Alanen, Jack 
Amsler, John 
Anderson, Marshall 
Badal, David 
Barber, Gary 
Barksdale, Joseph 
Bartlett, Tom 
Bates, Eileen 
Beall, Daniel 
Bennett, Toby 
Blue, Velma 
Bobzien, Gale 
Bognar, Jeff 
Booth, Eric 
Bradley, Stephen 
Brady, Talbot 
Brechbiel, Fred 
Bredeson, Mimi 
Bredeson, Richard 
Brierschmitt, Michael 
Brinker, Elisabeth 
Britt, Chester 
Brophy, Carolyn 
Brown, David 
Brown, James 
Burt, Roger 
Butler, Madeline 
Carmody, Cora 
Carr, Maureen 
Carroll, Rossye 
Caughel, Brian 
Cernosek, Gary 
Chang, Joan 
Chen, Jennifer 
Chiung, Ted 
Chu. Richard 
Church, Vic 
Cisney, Lee 
Clark, David 
Clem a. Joe 
Colaizzi, Donald 
Court, Terry 
Cross, James 
Cuddic, Jim 
Cupak. John 


ATTENDEES 


Sohar, Inc. 

OAO Corp. 

Dept, of Defense 
Lockheed Missiles & Space Co. 
Intermetrics, Inc. 

NASA/GSFC 
GSFC/NASA 
IDE, Inc. 

Ford Aerospace Corp. 

Ford Aerospace Corp. 

Defense Communications Agency 
PSC 

DCA/JDSSC/C344 
Computer Sciences Corp. 

MMS Systems 
Jet Propulsion Lab 
Computer Sciences Corp. 

Space Telescope Science Inst. 
Omitron 

Ford Aerospace Corp. 

NASA/GSFC 

Defense Communications Agency 

University of Maryland 

Auburn University 

Jet Propulsion Lab 

Jet Propulsion Lab 

NASA/GSFC 

Planning Research Corp. 

McDonnell Douglas Astronautics Co 
Computer Sciences Corp. 

Cadre Technologies 

McDonnell Douglas Astronautics Co 

Computer Sciences Corp. 

Computer Sciences Corp. 

Ford Aerospace Corp. 

Ford Aerospace Corp. 

Computer Sciences Corp. 

NASA/GSFC 

Unisys Corp. 

IITRI 

Computer Sciences Corp. 

Hughes Aircraft Company 
Auburn University 
Martin Marietta 
HRB Systems 




Daniell. Walter 
Daniels, Catherine 
Diclaudio. Mary 
Drew, Dan 
Driesman, Debbie 
Dyer, Kevin 
Ebker, Keith 
Edelstein, E. 

Edgar, Eric 
Ellis, Walter 
Emerson, Curtis 
Em mart, Connie 
Esker, Linda 
Evers, Jay 
Ferguson, Frances 
Fermino, Kerri 
Ferry, Dan 
Finnegan. Kenneth 
Firsching, Dorothy 
Fly, Ken 

Formanek, Kathleen 
Freedman, Glenn 
Gacuk, Peter 
Garcia, Enrique 
Gardner, Michael 
Gilliland, Denise 
Gilyeat, Colin 
Girone, Chuck 
Godfrey, Sally 
Goldberg, Nancy 
Gordon, Marc 
Grafton, Ed 
Graves, Rusell 
Griswold, Robert 
Guenterberg, Sharon 
Gupta, Lakshmi 
Main, Gertrud 
Hain, Klaus 
Flail, David 
Hall. Gardiner 
Halterman, Karen 
Haney, Modenna 
Harris, Bernard 
Hartman, Ken 
Hebenstreit. Karl 
Heffernan. Henry 
Heyliger. George 
Higgins. Herman 


IBM 

Defense Communications Agency 
Jet Propulsion Lab 
Unisys Corp. 

Computer Sciences Corp. 

Adanet 

Computer Sciences Corp. 

Grumman Data Systems 

HRB Systems 

IBM 

NASA/GSFC 
Computer Sciences Corp. 

Computer Sciences Corp. 

Unisys Corp. 

Stanford Telecommunications Corp. 
Stanford Telecommunications Corp. 
Computer Sciences Corp. 

Martin Marietta 
PRC 

NASA/GSFC 
Martin Marietta 

University of Houston at Clear Lake 
Spar Aerospace 
Jet Propulsion Lab 
Computer Sciences Corp. 

Stanford Telecommunications Corp. 
Advanced Technology, Inc. 

GE Astro Space 
NASA/GSFC 
Computer Sciences Corp. 

Booz, Allen & Hamilton 
Link Flight Simulation Corp. 

Dept, of Defense 

Computer Technology Associates 
Planning Research Corp. 

Ford Aerospace Corp. 

Computer Based Systems, Inc. 

Ford Aerospace Corp. 

OAO Corporation 
Martin Marietta 
NASA/GSFC 
Computer Sciences Corp. 

Logican, Inc. 

GCN 

Computer Technology Associates 
Dept, of Defense 





Holloway. Michael 

NASA/LaRC 

Holmes, James 

Unisys Corp. 

Howie, Bill 

NASA/MSFC 

Huber, Hartmut 

NSWC 

Hutchison, Roberta 

The Mitre Corp. 

Iseman, Chelsea 

Defense Communications Agency 

Jackson, Laverne 

PRC 

Janaczek, Mark 

Martin Marietta 

Jaworski, Allan 

Software Productivity Consortium 

Jessen, William 

RCA - ESD 

Johannson, Hank 

Ford Aerospace Co. 

Kannappan, Sam 
Kathuria, Manbir 

ABI Enterprises 

Kelly, John 

Jet Propulsion Lab 

Kelly, Lisa 

NASA/GSFC 

Kelly, Nancy 

PSC 

Kim, Seung 

Computer Sciences Corp. 

Kirby, Philip 

NASA/GSFC 

Kirk. Daniel 

NASA/GSFC 

Klein, Camille 

Hughes Aircraft Co. 

Klitsch, Gerald 

Computer Sciences Corp. 

Kubaryk, Peter 

IITRI 

Kudlinski, Robert 

NASA/LaRC 

Labaugh, Robert 

Martin Marietta Aerospace Corp. 

Lavallee, David 

Ford Aerospace & Comm. Corp. 

Leake, Stephen 

NIST 

Ledford, Rick 

McDonnell Douglas Corp. 

Lee, Sophia 

Defense Communications Agency 

Lee, Tom 

NASA/GSFC 

Leenhouts, Kathleen 
Liebhardt, Edward 

General Electric 

Lin, Chi 

Jet Propulsion Lab 

Lin, Meng-Chun 

Integral Systems, Inc. 

Littman, Dave 

NASA/GSFC 

Liu, Kuen-San 

Computer Sciences Corp. 

Lloyd, Michael 

General Dynamics 

Loesh, Bob 

System Technology Institute 

Lowe, Dawn 

NASA/GSFC 

Mall, Vance 

Independent Consultant 

Mallet, Bob 

Technology Planning, Inc. 

Mangieri, Mark 

Johnson Space Center 

Marciniak, John 

Marciniak & Associates 

Martinez, Bill 

Ford Aerospace Corp. 

Mathiasen, Candy 

Unisys Corp. 

Maury, Jesse 

NASA/GSFC 

McComas, Dave 

NASA/GSFC 

McCullough. Sterling 

Computer Technology Group 

McDonald. Beth 

Dept, of Defense 



McGarry. Frank 

NASA/GSFC 


McKcag. Thomas 

HRB Systems 


Mixon. Don 

Tlie Mitre Corp. 

ms 

Mohrman, Car! 

Martin Marietta ATC 


Molko, Patricia 

Jet Propulsion Lab 

z a 

Montoya, Maria 

McDonnell Douglas Astronautics Co. 


Moore, Mike 

CTA. Inc. 


Mularz, Diane 

The Mitre Corp. 

3 _ 

Murphy, Robert 

NASA/GSFC 


Naab, Joseph 

NASA/GSFC 


Nelson, Robert 

NASA Space Station Program Office 

= ; 

O'Brien, David 

Concurrent Computer Corp. 

■i 

Osman, Jeffrey 

Jet Propulsion Lab 


Owens, Kevin 

PRC 


Owings, Jan 

NASA/GSFC 

""" 

Patel, Kant 

Computer Sciences Corp. 


Peters, Karl 

NASA/GSFC 

w 

Pineosy, John 

Data Systems Analysis 

mm 

Pixton, Jerry 

Unisys Corporation 


Plunkett, Theresa 

Dept, of Defense 


Pulco, Joe 

Concurrent Computer Corp. 


Ransom, Bert 

NASA/C. SFC 


Rennie, Tom 

NASA/GSFC 


Reph, Mary 

NASA/GSFC 


Rice, Raymond 

McDonnell Douglas Astronautics Co. 


Rigney, Brandon 

PRC 

w 

Ritter, Sheila 

NASA/GSFC 


Roberts, Becky 

PRC 

E==S i 

Robertson. Laurie 

Computer Sciences Corp. 

t a c 

Robinson. Mary 

The Mitre Corp. 


Robison III, W. 

Jet Propulsion Lab 


Rogers, Kathy 

The Mitre Corp. 


Rohr, John 

Jet Propulsion Lab 


Roy. Daniel 

Ford Aerospace Corp. 

fei ! 

Rucki, Dan 

Dept, of Defense 

s : 

Sabnis, Releha 

Computer Sciences Corp. 


Sank, Victor 

FHA 

4 

JD:. -2* 

Schubert, Kathy 

NASA/LeRC 

m i 

Schwenk, Robert 

NASA/GSFC 


Seeger, Howard 

Science Applications International Corp. 

gj I 

Seidewitz, Fd 

NASA/GSFC 


Seo, Kyungsil 

Defense Communications Agency 
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